Dependabot now flags malware in all eight package registries, from npm to PyPI

GitHub has expanded its supply chain security defenses: Dependabot now alerts about malicious packages not just in npm but across all major registries. The change was made possible by integrating with the OpenSSF repository that aggregates malware data.

Previously, GitHub's malware detection only worked for npm and relied on internal mechanisms. Building coverage for the remaining ecosystems would have taken years, according to the head of the Dependabot team in GitHub's supply chain security organization. Instead, engineers built a single import pipeline based on open data.

The OpenSSF malicious-packages repository launched in 2023. It already holds over 15,000 reports in OSV format, and the database grows daily through community submissions and automated detection systems. Threat types include typosquatting, dependency confusion packages, compromised accounts, and malicious prebuilt binaries. The format is open and structured, which makes it possible to cover any ecosystem supported by the OSV schema.

The new importer follows the same pattern GitHub already used for other vulnerability data sources, such as RubySec, RustSec, and PyPA. It walks the source repository's file tree, collects files changed since the last run, and processes each one. Before anything touches the database, every OSV record undergoes strict validation of required fields, types, and format. A record that fails validation is rejected and logged — no "mostly correct" fixes are silently applied.

As a result, the GitHub Advisory Database now ingests malware reports from OpenSSF, and Dependabot alerts cover eight ecosystems: npm, PyPI, Maven, RubyGems, NuGet, Go, crates.io, and PHP Composer. Earlier this year the feature arrived for npm, and now it has reached PyPI.

For users, this means Dependabot can flag a compromised package in advance when installing dependencies from any of these registries. The threat of credential theft at install time remains real, but the system now spans a much wider range of languages and platforms.